Verify SSL Server Certificate

Demonstrates how to connect to an SSL server and verify its SSL certificate.

Download Chilkat .NET for 4.0 Framework

Download Chilkat .NET for 64-bit 4.0 Framework (x64)

Download Chilkat .NET for 2.0 / 3.5 Framework

Download Chilkat .NET for 64-bit 2.0 / 3.5 Framework (x64)

Download Chilkat .NET for 1.0 / 1.1 Framework

Chilkat.Socket socket = new Chilkat.Socket();

bool success;
success = socket.UnlockComponent("Anything for 30-day trial");
if (success != true) {
    MessageBox.Show("Failed to unlock component");
    return;
}

bool ssl;
ssl = true;
int maxWaitMillisec;
maxWaitMillisec = 20000;

//  The SSL server hostname may be an IP address, a domain name,
//  or "localhost".
string sslServerHost;
sslServerHost = "www.paypal.com";
int sslServerPort;
sslServerPort = 443;

//  Connect to the SSL server:
success = socket.Connect(sslServerHost,sslServerPort,ssl,maxWaitMillisec);
if (success != true) {
    MessageBox.Show(socket.LastErrorText);
    return;
}

Chilkat.Cert cert = null;

bool bExpired;
bool bRevoked;
bool bSignatureVerified;
bool bTrustedRoot;

cert = socket.GetSslServerCert();
if (!(cert == null )) {

    textBox1.Text += "Server Certificate:" + "\r\n";
    textBox1.Text += "Distinguished Name: " + cert.SubjectDN + "\r\n";
    textBox1.Text += "Common Name: " + cert.SubjectCN + "\r\n";
    textBox1.Text += "Issuer Distinguished Name: "
         + cert.IssuerDN + "\r\n";
    textBox1.Text += "Issuer Common Name: " + cert.IssuerCN + "\r\n";

    bExpired = cert.IsExpired();
    bRevoked = cert.Revoked;
    bSignatureVerified = cert.SignatureVerified;
    bTrustedRoot = cert.TrustedRoot;

    textBox1.Text += "Expired: " + bExpired + "\r\n";
    textBox1.Text += "Revoked: " + bRevoked + "\r\n";
    textBox1.Text += "Signature Verified: " + bSignatureVerified + "\r\n";
    textBox1.Text += "Trusted Root: " + bTrustedRoot + "\r\n";

}

//  Close the connection with the server
//  Wait a max of 20 seconds (20000 millsec)
socket.Close(20000);